Updated kernel-rt packages that fix multiple security issues are now available for Red Hat Enterprise MRG 2.5.

The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The kernel-rt packages contain the Linux kernel, the core of any Linux operating system.

  * A race condition leading to a use-after-free flaw was     found in the way the Linux kernel's TCP/IP protocol     suite implementation handled the addition of fragments     to the LRU (Last-Recently Used) list under certain     conditions. A remote attacker could use this flaw to     crash the system or, potentially, escalate their     privileges on the system by sending a large amount of     specially crafted fragmented packets to that system.
    (CVE-2014-0100, Important)

  * A race condition flaw, leading to heap-based buffer     overflows, was found in the way the Linux kernel's N_TTY     line discipline (LDISC) implementation handled     concurrent processing of echo output and TTY write     operations originating from user space when the     underlying TTY driver was PTY. An unprivileged, local     user could use this flaw to crash the system or,     potentially, escalate their privileges on the system.
    (CVE-2014-0196, Important)

  * A flaw was found in the way the Linux kernel's floppy     driver handled user space provided data in certain error     code paths while processing FDRAWCMD IOCTL commands. A     local user with write access to /dev/fdX could use this     flaw to free (using the kfree() function) arbitrary     kernel memory. (CVE-2014-1737, Important)

  * It was found that the Linux kernel's floppy driver     leaked internal kernel memory addresses to user space     during the processing of the FDRAWCMD IOCTL command. A     local user with write access to /dev/fdX could use this     flaw to obtain information about the kernel heap     arrangement. (CVE-2014-1738, Low)

Note: A local user with write access to /dev/fdX could use these two flaws (CVE-2014-1737 in combination with CVE-2014-1738) to escalate their privileges on the system.

  * A use-after-free flaw was found in the way the     ping_init_sock() function of the Linux kernel handled     the group_info reference counter. A local, unprivileged     user could use this flaw to crash the system or,     potentially, escalate their privileges on the system.
    (CVE-2014-2851, Important)

  * It was found that a remote attacker could use a race     condition flaw in the ath_tx_aggr_sleep() function to     crash the system by creating large network traffic on     the system's Atheros 9k wireless network adapter.
    (CVE-2014-2672, Moderate)

  * A NULL pointer dereference flaw was found in the     rds_iw_laddr_check() function in the Linux kernel's     implementation of Reliable Datagram Sockets (RDS). A     local, unprivileged user could use this flaw to crash     the system. (CVE-2014-2678, Moderate)

  * A race condition flaw was found in the way the Linux     kernel's mac80211 subsystem implementation handled     synchronization between TX and STA wake-up code paths.
    A remote attacker could use this flaw to crash the     system. (CVE-2014-2706, Moderate)

  * It was found that the try_to_unmap_cluster() function in     the Linux kernel's Memory Managment subsystem did not     properly handle page locking in certain cases, which     could potentially trigger the BUG_ON() macro in the     mlock_vma_page() function. A local, unprivileged user     could use this flaw to crash the system. (CVE-2014-3122,     Moderate)

Users are advised to upgrade to these updated packages, which upgrade the kernel-rt kernel to version kernel-rt-3.10.33-rt32.34 and correct these issues. The system must be rebooted for this update to take effect.

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1392 advisory.

    - [kernel] futex: Fix errors in nested key ref-counting (Denys Vlasenko) [1094458] {CVE-2014-0205}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Pinkie Pie discovered a flaw in the Linux kernel's futex subsystem. An unprivileged local user could exploit this flaw to cause a denial of service (system crash) or gain administrative privileges.
(CVE-2014-3153)

Dmitry Vyukov reported a flaw in the Linux kernel's handling of IPv6 UDP Fragmentation Offload (UFO) processing. A remote attacker could leverage this flaw to cause a denial of service (system crash).
(CVE-2013-4387)

Hannes Frederic Sowa discovered a flaw in the Linux kernel's UDP Fragmentation Offload (UFO). An unprivileged local user could exploit this flaw to cause a denial of service (system crash) or possibly gain administrative privileges. (CVE-2013-4470)

A flaw was discovered in the Linux kernel's IPC reference counting. An unprivileged local user could exploit this flaw to cause a denial of service (OOM system crash). (CVE-2013-4483)

halfdog reported an error in the AMD K7 and K8 platform support in the Linux kernel. An unprivileged local user could exploit this flaw on AMD based systems to cause a denial of service (task kill) or possibly gain privileges via a crafted application. (CVE-2014-1438)

Sasha Levin reported a bug in the Linux kernel's virtual memory management subsystem. An unprivileged local user could exploit this flaw to cause a denial of service (system crash). (CVE-2014-3122).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Pinkie Pie discovered a flaw in the Linux kernel's futex subsystem. An unprivileged local user could exploit this flaw to cause a denial of service (system crash) or gain administrative privileges.
(CVE-2014-3153)

A flaw was discovered in the Linux kernel virtual machine's (kvm) validation of interrupt requests (irq). A guest OS user could exploit this flaw to cause a denial of service (host OS crash).
(CVE-2014-0155)

An information leak was discovered in the netfilter subsystem of the Linux kernel. An attacker could exploit this flaw to obtain sensitive information from kernel memory. (CVE-2014-2568)

Sasha Levin reported a bug in the Linux kernel's virtual memory management subsystem. An unprivileged local user could exploit this flaw to cause a denial of service (system crash). (CVE-2014-3122).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
76677	RHEL 6 : MRG (RHSA-2014:0557)	Nessus	Red Hat Local Security Checks	2014/7/22	2023/5/14	high
78618	Oracle Linux 6 : kernel (ELSA-2014-1392)	Nessus	Oracle Linux Local Security Checks	2014/10/22	2026/2/9	high
74354	Ubuntu 10.04 LTS : linux vulnerabilities (USN-2233-1)	Nessus	Ubuntu Local Security Checks	2014/6/6	2022/5/25	high
74359	Ubuntu 12.04 LTS : linux-lts-saucy vulnerabilities (USN-2239-1)	Nessus	Ubuntu Local Security Checks	2014/6/6	2022/5/25	high

检测

插件搜索

high

high

high

high